Privacy Policy

1. Data controller

This Privacy Policy explains how personal data is processed in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"). The data controller is:

2. Data we process

• Purchase data: name, email address, country and order details, needed to deliver the product and provide support (Art. 6(1)(b) GDPR, performance of a contract).
• Communications: messages you send us by email or WhatsApp, used to respond to you (Art. 6(1)(b) and (f)).
• Usage data: pages visited and key interactions, via Google Analytics 4 and Meta Pixel, used to measure and improve our website (Art. 6(1)(a), consent, where required).

We do not sell, rent or trade personal data.

3. Payments: Paddle

All payments are processed by Paddle.com, our Merchant of Record and an independent controller for payment data, certified to PCI-DSS Level 1. Card details are entered directly into Paddle's secure checkout. Create Paradise Now servers never receive or store bank card data. Paddle's processing is described in the Paddle Privacy Policy.

4. Affiliate tracking: Tolt.io

If you arrive through a partner link, a secure referral token from Tolt.io is stored to attribute the sale to the referring partner. The token identifies the referral, not you; no sensitive personal data is shared with partners.

5. Other processors

We use carefully selected service providers acting on our behalf, including website hosting (Netlify), analytics (Google, Meta) and, where you choose to use it, the voice assistant on our website (ElevenLabs). Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Cookies

We use cookies strictly necessary for the website and checkout, plus analytics and referral cookies described above. You can block or delete cookies in your browser settings at any time; the content pages remain accessible.

7. Retention

Purchase records are kept for as long as required by tax and accounting law. Other data is kept only as long as needed for the purpose it was collected for, then deleted.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any right, email maxim@createparadise.now; we respond within one month. You may also lodge a complaint with a supervisory authority, in Spain the Agencia Española de Protección de Datos (AEPD).

9. Changes

We may update this policy; the current version is always published at this address with its date.

See also our Terms of Service and Refund Policy.